Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
File: qT4365yxmDJdZWZzKJJY0o6587g.mft (raw, json)
Hash identifier: 58wjQGRPDas4ffFVxqHP7iw7g2V99DR2rbsghYzI3cg=
Subject key identifier: E1:E9:A7:A9:55:7D:67:6B:52:D7:0B:65:5D:4E:8D:ED:78:43:37:BE
Authority key identifier: A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
Certificate issuer: /CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Certificate serial: 0194BCAA263D21EC4B0E5D837673185B8106
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
Manifest number: 13BF
Signing time: Fri 31 Jan 2025 14:00:55 +0000
Manifest this update: Fri 31 Jan 2025 14:00:55 +0000
Manifest next update: Sat 01 Feb 2025 14:00:55 +0000
Files and hashes: 1: B6IAypRDNnn3wQIonYGMbrtebVA.roa (hash: RDNajdiQ2iOHeS1ehJ984LhPxM3hBSKi1PJW1BaavLE=)
2: qT4365yxmDJdZWZzKJJY0o6587g.crl (hash: S1BnKZsDi0APuPWdAS3QaiQO4oC9wx7duW9kn9yelRw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:aa:26:3d:21:ec:4b:0e:5d:83:76:73:18:5b:81:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a93e37eb9cb198325d656673289258d28eb9f3b8
Validity
Not Before: Jan 31 14:00:55 2025 GMT
Not After : Feb 1 14:00:55 2025 GMT
Subject: CN=e1e9a7a9557d676b52d70b655d4e8ded784337be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:95:07:58:2d:ef:da:79:7a:d6:a7:31:97:c0:
8a:e5:e1:4f:88:5a:7c:bf:30:8c:e9:7f:dc:ed:85:
6c:bb:f1:67:3c:ee:71:17:ab:ac:ed:41:10:05:22:
13:68:77:01:ef:8f:96:29:9c:32:fb:8d:fe:3a:7c:
de:5c:9a:8e:41:b2:f4:d9:1e:09:94:ee:99:63:c5:
5d:08:4d:8e:ec:65:57:9d:e6:04:41:b0:5f:25:1e:
99:bc:41:95:28:6e:68:0c:0b:f3:b0:c5:92:af:4d:
ad:17:08:e5:c2:df:7c:29:14:05:ac:ac:c4:79:79:
6a:06:e3:62:cb:19:72:aa:cc:53:82:f2:20:98:70:
4f:af:79:03:ce:f1:8d:20:35:fa:09:76:13:18:52:
4b:31:2e:31:70:ef:b1:91:d8:8d:03:36:28:95:73:
bf:62:5b:15:d8:5d:b0:c0:65:29:39:50:9b:d2:f3:
d2:a0:5e:62:03:65:2e:3c:64:58:9f:18:e5:19:4d:
8f:83:46:ea:db:76:10:af:9f:32:29:4b:00:68:df:
e3:d7:81:d2:9f:d8:74:ea:1f:6a:18:b7:17:00:79:
1a:d9:8f:59:e7:a5:61:9b:3c:6f:cf:e5:c2:f1:5e:
72:30:1b:5b:5a:e5:82:d5:bb:63:c6:46:b8:e1:78:
a9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E9:A7:A9:55:7D:67:6B:52:D7:0B:65:5D:4E:8D:ED:78:43:37:BE
X509v3 Authority Key Identifier:
keyid:A9:3E:37:EB:9C:B1:98:32:5D:65:66:73:28:92:58:D2:8E:B9:F3:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qT4365yxmDJdZWZzKJJY0o6587g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/0461d2-2182-408e-86df-39f753757848/1/qT4365yxmDJdZWZzKJJY0o6587g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:72:61:0b:bb:44:69:84:78:ff:7b:75:0f:a9:e8:5d:f9:25:
5b:df:07:1f:34:e5:e1:d7:0d:bf:2f:2e:b9:7d:62:01:3f:b0:
f4:2c:76:cf:0a:73:dd:ac:a2:dd:09:3e:5a:06:10:14:a3:3f:
15:01:29:83:4d:a8:8a:84:d1:25:4a:bc:70:be:ff:30:f8:dd:
45:d1:c5:c9:57:98:fb:11:26:00:40:c3:6d:4e:0b:7a:d7:00:
02:c0:ce:bd:8a:79:c7:9d:4b:b3:c3:87:71:c4:30:30:31:52:
c2:ab:9c:d9:ba:95:51:ff:9d:fe:6d:f7:3b:9e:c7:dc:7e:9a:
5f:68:07:4b:09:80:dc:d5:22:67:bd:d1:16:23:fb:45:48:1a:
c7:62:94:94:50:d7:da:0f:9c:af:8b:38:6c:dd:69:8e:9f:11:
b1:00:47:4e:04:28:43:0f:3f:64:04:d8:70:45:30:8b:80:bd:
2d:6b:91:ba:49:a2:10:d6:9a:db:7c:12:a3:d5:eb:33:0c:35:
c3:50:be:45:d4:ae:d3:1e:74:1d:c9:fe:18:50:39:31:ad:26:
b3:13:6b:20:e9:59:c5:bb:ed:92:07:cb:70:b1:79:37:5d:1f:
e3:cc:86:65:99:04:5e:41:1b:18:83:aa:4d:2b:13:c6:9c:70:
90:34:1e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:22:06 2025 by rpki-client